US20040046017A1 - Password identification apparatus and password identification method - Google Patents
Password identification apparatus and password identification method Download PDFInfo
- Publication number
- US20040046017A1 US20040046017A1 US10/362,819 US36281903A US2004046017A1 US 20040046017 A1 US20040046017 A1 US 20040046017A1 US 36281903 A US36281903 A US 36281903A US 2004046017 A1 US2004046017 A1 US 2004046017A1
- Authority
- US
- United States
- Prior art keywords
- pass
- code
- judgment
- unit
- input
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1025—Identification of user by a PIN code
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
Definitions
- the present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses to predetermined information by collation of pass-codes. More particularly, the present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses made by an external apparatus by collation of pass-codes.
- the present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses made by an external apparatus such as a reader/writer to an internal memory of the pass-code identification device such as an IC card by collation of pass-codes. More particularly, the present invention relates to a pass-code identification device and a pass-code identification method, which are used for determining whether or not access-right control based on a pass-code is required.
- a pass-number is defined as a string or a combination of numbers each having a value in the range 0 to 9 whereas a password is defined as a string or a combination of alphabetical characters.
- a pass-code is a generic technical term for the pass-number and the password.
- a cash dispenser When the user of a cash card uses the cash card at a bank or an other financial institution, a cash dispenser typically urges the user to enter a pass-number or a password as a means for authenticating the user. The cash dispenser then carries out a withdrawal operation after verifying that the user has entered a correct pass-number or a correct password.
- a pass-code There are other applications of a pass-code. Examples of the other applications are an operation to enter a pass-code to a safety box, which is installed in a hotel or an other lodging facility, in order to open the safety box, an operation to enter a password to a computer at a log-in, and an operation to enter a pass-code to an information terminal in order to request the terminal to conceal information.
- a cash dispenser or an IC-card reader/writer installed at the entrance of a concert hall, a station, or the like is capable of making an access to the IC card without contact.
- the user enters a pass-number or a password to the IC-card reader side, and the IC card and the IC-card reader/writer collate the entered pass-number or the entered password with the fetched pass-number or the fetched password for verifying the user and for authenticating process.
- an application stored in the IC card can be used. Examples of the application stored in the IC card include electronic money and an electronic ticket.
- an IC card having a storage space with a relatively large size is introduced and has been becoming popular.
- the conventional cash card or the like only one storage area for one application can be provided. It is thus necessary for the user to carry a plurality of IC cards for different purposes and/or different applications.
- a plurality of applications can be stored in such an IC card.
- one IC card can be used for storing two or more applications such as electronic money for electronic financial settlements and electronic tickets each used for entering a specific concert hall. In this way, an IC card can be used for a variety of purposes and/or applications.
- an IC card having a memory function with a large storage capacity or an IC chip implementing a semiconductor IC card
- a portable terminal By carrying about such a portable terminal, the user is capable of exchanging electronic value information with an external apparatus such as mainly an apparatus used for electronic financial settlements.
- the conventional cash card is used for storing only one application (described above). Thus, by holding one pass-number or one password in magnetic stripes on a cash card, securities of all cards can be controlled.
- a pass-code identification device which is used for controlling accesses made by an external apparatus by collation of pass-codes.
- the pass-code identification device includes:
- a communication unit for communicating with the external apparatus
- a data-holding unit for holding data
- a pass-code-holding unit for holding a pass-code
- a pass-code judgment unit for forming a judgment as to whether or not an input pass-code received from the external apparatus matches the pass-code held by the pass-code holding unit;
- condition-setting unit for setting a condition for forming the judgment on the input pass-code
- a flow control unit for controlling accesses made by the external apparatus to the data-holding unit through the communication unit in accordance with the condition for forming the judgment on the input pass-code, which is a condition set by the condition-setting unit.
- the pass-code identification device provided in accordance with the first aspect of the present invention can be used for example as an IC card for controlling accesses to the IC card's memory having a relatively large storage capacity by collation of pass-codes.
- the IC card is generally a cartridge, which includes an IC chip and an antenna, having about the same size as a credit card.
- the IC chip itself can also be used as a device embedded in a portable terminal such as a portable telephone or a PDA or embedded in an other information-processing apparatus.
- the IC card can also be used by inserting the card into an information-processing apparatus.
- An IC chip or an IC card can be used as a prepaid device having a function related to value information such as electronic money and electronic tickets.
- the function of an IC chip or an IC card is referred to as “an application”.
- the memory area of an IC card is typically used for storing value information such as electronic money and electronic tickets for more than one application.
- a pass-code such as a pass-number or a password is set. Pass-codes are collated with each other to control a right of an access to an application.
- the IC card collates a pass-code entered to the IC card by the user with a pass-code stored in the application in advance and, only if the pass-codes match each other, does the IC card permit an access to the application.
- the condition-setting unit determines whether or not the pass-code judgment unit needs to form the judgment on the input pass-code. Then, the flow control unit permits an access made by the external apparatus to the data-holding unit through the communication unit if the condition-setting unit determines that the pass-code judgment unit does not need to form the judgment on the input pass-code.
- the flow control unit also permits an access made by the external apparatus to the data-holding unit through the communication unit. In order to permit an access made by the external apparatus to data held by the data-holding unit the flow control unit puts the data-holding unit in a state of being connected to the communication unit.
- condition-setting unit can be provided with a first judgment-necessity-holding means for holding information indicating whether or not the pass-code judgment unit needs to form the judgment on the input pass-code; a second judgment-necessity-holding means for holding information indicating whether or not an input pass-code is required for changing the first judgment-necessity-holding means from a state of holding information indicating that the pass-code judgment unit needs to form the judgment on the input pass-code to a state of holding information indicating that the pass-code judgment unit does not need to form the judgment on the input pass-code; and a third judgment-necessity-holding means for holding information indicating whether or not an input pass-code is required for changing the first judgment-necessity-holding means from a state of holding information indicating that the pass-code judgment unit does not need to form the judgment on the input pass-code to a state of holding information indicating that the pass-code judgment unit needs to form the judgment on the input pass-code.
- the condition-setting unit is capable of setting a condition for forming the judgment on the input pass-code in accordance with the information held by the first judgment-necessity-holding means, the information held by the second judgment-necessity-holding means, and the information held by the third judgment-necessity-holding means. That is to say, it is possible to set a change of a pass-code from a valid state to an invalid state and from an invalid state to a valid state by putting conditions for entering a pass-code in a variety of combinations. For example, in order to change a pass-code from an invalid state to a valid state in an operation to change a pass-code, it is not necessary to enter a pass-code. In order to change a pass-code from a valid state to an invalid state in an operation to change a pass-code, on the other hand, it is necessary to enter a pass-code.
- the pass-code identification device has a plurality of pass-codes; the pass-code judgment unit forms a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes held by the pass-code holding unit; and the flow control unit permits an access made by the external apparatus to the data-holding unit through the communication unit if the condition-setting unit determines that the pass-code judgment unit needs to form the judgment on the input pass-code and the pass-code judgment unit outputs a judgment result revealing that the input pass-code matches all the pass-codes held by the pass-code-holding unit.
- some external apparatuses each used for inputting a pass-code can each be assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code can each be assigned to an operator (such as a person in charge of card services).
- the functions of pass-codes can be controlled in accordance with a judgment formed by an operator.
- the system can be set to forcibly require a pass-code input without regard to the wills of the individual users.
- the pass-code identification device has a plurality of pass-codes each associated with a memory area in the data-holding unit the pass-code judgment unit forms a judgment as to whether or not an input pass-code received from the external apparatus through the communication unit matches each of the pass-codes held by the pass-code holding unit; and the flow control unit permits an access made by the external apparatus to a specific memory area through the communication unit if the condition-setting unit determines that the pass-code judgment unit needs to form the judgment on the input pass-code and the pass-code judgment unit outputs a judgment result revealing that the input pass-code matches one of the stored pass-codes that is associated with the specific memory area.
- the external apparatus is capable of making an access to the IC chip through a radio interface. Also in this case, rights of accesses to a memory area such as that of an IC chip are controlled by collation of pass-codes. After a locked state of an information-processing apparatus including an embedded IC chip is unlocked by entering a pass-code to the information-processing apparatus, a radio connection between the information-processing apparatus and the external apparatus can be established and an access to the memory area is permitted. As an alternative, after a radio connection between the IC chip embedded in the information-processing apparatus and the external apparatus is established, access rights are controlled on the basis of pass-codes entered to the external apparatus.
- a pass-code identification method which is used for controlling accesses made by an external apparatus to predetermined data by collation of pass-codes.
- the pass-code identification method includes a pass-code judgment step of forming a judgment as to whether or not an input pass-code received from the external apparatus matches a pass-code set for the predetermined data; a condition-setting step of setting a condition for forming the judgment on the input pass-code; and a flow control step of controlling accesses made by the external apparatus to the predetermined data in accordance with the condition for forming the judgment on the input pass-code, which is a condition set at the condition-setting step.
- the pass-code identification method provided in accordance with the second aspect of the present invention can be adopted for example in an IC card for controlling accesses to the IC card's memory having a relatively large storage capacity by collation of pass-codes.
- the memory area of an IC card is typically used for storing value information such as electronic money and electronic tickets for more than one application.
- a pass-code such as a pass-number or a password is set. Pass-codes control a right of an access.
- the IC card collates a pass-code entered to the IC card by the user with a pass-code stored in the application in advance and, only if the pass-codes match each other, does the IC card permit an access to the application.
- the condition-setting step is executed also to determine whether or not it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code. Then, at the flow control step, an access made by the external apparatus to the predetermined data is permitted if a result of execution of the condition-setting step indicates that the pass-code judgment step of forming the judgment on the input pass-code is not necessary.
- An access made by the external apparatus to the predetermined data is also permitted at the flow control step if a result of execution of the condition-setting step indicates that the pass-code judgment step of forming the judgment on the input pass-code is necessary and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches a pass-code set for the predetermined data.
- the condition-setting step may include a first judgment-necessity-holding step of managing information indicating whether or not it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code; a second judgment-necessity-holding step of managing information indicating whether or not an input pass-code is required for changing information from a value indicating that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code to a value indicating that it is not necessary to execute the pass-code judgment step of forming the judgment on the input pass-code; and a third judgment-necessity-holding step of managing information indicating whether or not an input pass-code is required for changing information from a value indicating that it is not necessary to execute the pass-code judgment step of forming the judgment on the input pass-code to a value indicating that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code.
- a condition for forming the judgment on the input pass-code is set in accordance with the information managed by the first judgment-necessity-holding step, the information managed by the second judgment-necessity-holding step, and the information managed by the third judgment-necessity-holding step. That is to say, it is possible to set a change of a pass-code from a valid state to an invalid state and from an invalid state to a valid state by putting conditions for entering a pass-code in a variety of combinations. For example, in order to change a pass-code from an invalid state to a valid state in an operation to change a pass-code, it is not necessary to enter a pass-code. In order to change a pass-code from a valid state to an invalid state in an operation to change a pass-code, on the other hand, it is necessary to enter a pass-code.
- a plurality of pass-codes may be set for predetermined data to be accessed.
- a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes set for predetermined data is formed.
- an access made by the external apparatus to the predetermined data is permitted if a result of execution of the condition-setting step determines that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches all the pass-codes set for predetermined data.
- some external apparatuses each used for inputting a pass-code can each be assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code can each be assigned to an operator such as a person in charge.
- the functions of pass-codes can be controlled in accordance with a judgment formed by an operator.
- the system can be set to forcibly require a pass-code input without regard to the wills of the individual users.
- a plurality of pass-codes may be set, each being associated with a memory area.
- a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes each associated with a memory area is formed.
- an access made by the external apparatus to a specific memory area is permitted if a result of execution of the condition-setting step determines that it is necessary to execute the judgment on the input pass-code and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches one of the stored pass-codes that is associated with the specific memory area.
- FIG. 1 is a diagram showing a model of the hardware configuration of a portable terminal 10 implemented by an embodiment of the present invention.
- FIG. 2 is an explanatory diagram conceptually showing a mechanism of radio communication based on electromagnetic induction between a reader/writer 101 and an IC chip 50 .
- FIG. 3 is a diagram showing a transformer model representing a system including the reader/writer 101 and the IC card 50 .
- FIG. 4 is an explanatory diagram showing a model of a functional configuration of the IC card 50 embedded in a portable terminal 10 implemented by the embodiment.
- FIG. 5 is a diagram showing a model of one-byte data transmitted and received through a communication unit 51 .
- FIG. 6 is a diagram showing a model of the configuration of a packet including pieces of one-byte data.
- FIG. 7 is a diagram showing a basic sequence of a packet exchange between the data-transmitting and receiving parties.
- FIG. 8 is a diagram showing the configuration of a flow control unit 55 .
- FIG. 9 is a block diagram showing a typical configuration of the pass-code identification device (the IC card 50 ) including a plurality of pass-code-holding units and a plurality of pass-code-comparison units.
- FIG. 10 is a block diagram showing a typical configuration of the pass-code identification device (the IC card 50 ) in which a pass-code can be set to each of the memory are in the data holding unit 52 .
- FIG. 1 shows a model of the hardware configuration of a portable terminal 10 implemented by an embodiment of the present invention. Designed into a small size and a small weight like a portable telephone, a PDA (Personal Digital Assistant) or the like, the portable terminal 10 is an information-processing terminal that can be carried about by the user all the time.
- the portable terminal 10 is an information-processing terminal that can be carried about by the user all the time.
- the portable terminal 10 includes an IC card 50 , a controller 11 , a user input unit 12 and a display unit 13 .
- the IC card 50 Used for carrying out radio communication with an external apparatus, the IC card 50 includes a memory function.
- the controller 11 controls internal operations of the portable terminal 10 in an integrated manner.
- the user input unit 12 is composed of components such as keys and buttons used by the user for entering a variety of character strings such as mainly a pass-number and a password and entering commands.
- the display unit 13 is typically an LCD (Liquid Crystal Display) for displaying a result of a process on a screen. It is needless to say that, in order to implement native functions of the portable terminal 10 , the portable terminal 10 may be provided also with peripheral devices and circuit components other than those shown in the figure.
- the controller 11 includes components such as a CPU (Central Processing Unit), a ROM (Read-Only Memory), and a RAM (Random Access Memory), which are incorporated in a single unit. By executing program codes stored in advance in the ROM, the controller 11 controls a variety of operations in the portable terminal 10 .
- a CPU Central Processing Unit
- ROM Read-Only Memory
- RAM Random Access Memory
- the IC card 50 has a radio interface 14 for establishing a radio connection with the external apparatus 100 and a wire interface 15 for establishing a wire connection with the controller 11 employed in the portable terminal 10 .
- the radio interface 14 it is possible to employ a contact interface standard defined by ISO 7816 or a radio interface standard defined by ISO 14443. A technique of connection between the IC chip 50 and the external apparatus 100 will be described later.
- the IC chip 50 typically adopts a technology developed for a non-contact IC card.
- the IC chip 50 is driven by an electromagnetic wave generated by the external apparatus 100 through the radio interface 14 .
- the electromagnetic wave generated by the external apparatus 100 does not reach the portable terminal 10 anymore.
- the IC chip 50 ceases to operate.
- the right of an access to the inside of the IC chip 50 is revoked in response to an event in which the electromagnetic wave is interrupted.
- the IC card 50 provided by the present invention has a memory area having a relatively large size. Such a memory area is brought by the miniaturization technology and the like.
- the memory area is implemented by a semiconductor memory, magnetic stripes, or an other writable and readable storage medium.
- One or more applications are assigned to the memory area. Examples of the application are pieces of value information such as mainly electronic money and electronic tickets.
- a pass-code such as a pass-number or a password is set for each of the applications. In this way, an access right can be controlled for each application. For example, a pass-code input by way of the radio interface 14 or the wire interface 15 is compared with a pass-code set for an application. If the pass-code input by way of the radio interface 14 or the wire interface 15 matches the pass-code set for the application, an access to the application is granted (will be described later).
- the external apparatus 100 is an apparatus utilizing an application assigned to the memory area in the IC card 50 .
- the external apparatus 100 includes a reader/writer 101 , which establishes a connection with the IC chip 50 by applying a technology developed for a non-contact IC card.
- the external apparatus 100 also has circuit components and peripheral devices for carrying out arithmetic processing of specific jobs and an input unit and an output unit for interactive input with the user (which are not shown in the figure).
- the external apparatus 100 includes an apparatus for using electronic money, an apparatus for processing electronic value information, and an apparatus for verifying a user and for authenticating process.
- the example of the apparatus for using electronic money is an ATM (Automatic Teller Machine) installed at a bank.
- the example of the apparatus for processing electronic value information is an apparatus using electronic tickets at a gate of a concert hall and a ticket wicket of a station or an airport.
- the example of the apparatus for verifying a user and for authenticating process is a safety box installed at a hotel or a lodging facility.
- the user enters a pass-code to the portable terminal 10 via the user input unit 12 to unlock a locked state.
- the pass-code entered by the user is displayed on the display unit 13 for confirmation before being supplied to the IC chip 50 embedded in the portable terminal 10 by way of the wire interface 15 .
- the IC chip 50 collates the pass-code entered by the user with pass-codes set for applications or for directories in memory areas. The user is then given a right of an access to a memory area allocated to the matched application or a directory.
- accesses to the applications are controlled on the basis of pass-codes, which are received from the external apparatus 100 after a radio connection is established between the IC chip 50 employed in the portable terminal 10 and the external apparatus 100 .
- FIG. 2 is an explanatory diagram conceptually showing a mechanism of the radio communication between the reader/writer 101 based on electromagnetic induction and the IC card 50 .
- the reader/writer 101 has an antenna L RW implemented as a loop coil. A magnetic field is generated in areas surrounding the antenna L RW by a current I RW flowing through the antenna L RW .
- a loop coil L c is electrically formed in an area surrounding the IC card 50 .
- An induction voltage induced by the magnetic field generated by the loop antenna L c of the reader/writer 101 side appears at the terminals of the loop coil L c at the IC chip 50 side and applied to the terminals of the IC card 50 , which are connected to the terminals of the loop coil L c .
- the degree of coupling between the antenna L RW of the reader/writer 101 and the loop coil L c of the IC chip 50 varies in dependence on the positional relation between the antennal L RW of the reader/writer 101 and the loop coil L c of the IC chip 50 .
- the antenna L RW of the reader/writer 101 and the loop coil L c of the IC chip 50 can be interpreted as a system functioning as a transformer. That is to say, the reader/writer 101 and the IC chip 50 can be expressed model shown in FIG. 3.
- the reader/writer 101 modulates a current I RW flowing through the antenna L RW in order to modulate a voltage V o induced in the loop coil L c of the IC card 50 .
- the modulation of the current I RW and the modulation of the induced voltage V o are used for transmitting data from the reader/writer 101 to the IC card 50 .
- the transmitted data includes a pass-code for getting a right of an access to an application and value information for an application.
- the pass-code is a pass-number or a password entered by the user to the external apparatus 100 . Examples of the value information are electronic money and an electronic ticket.
- the IC chip 50 has a load-switching function for changing a load between the terminals of the loop coil L c in accordance with data to be transmitted as a response to the reader/writer 101 .
- the load between the terminals of the loop coil L c is varied, the impedance between the terminals of the antenna employed in the reader/writer 101 also changes.
- a current I RW flowing through the antenna L RW and a voltage V RW appearing between the terminals of the antenna L RW also change.
- the reader/writer 101 By demodulating the changing current I RW or the changing voltage V RW , the reader/writer 101 is capable of obtaining the data transmitted as a response by the IC card 50 .
- the data obtained by the external apparatus 100 from the IC card 50 includes value information such as electronic money and an electronic ticket, which are provided by applications.
- FIG. 4 is an explanatory diagram showing a model of a functional configuration of the IC card 50 embedded in the portable terminal 10 implemented by the embodiment.
- the IC card 50 serves as the pass-code identification device provided by the present invention. As shown in the figure, the IC card 50 has a communication unit 51 , a data-holding unit 52 , a pass-code-holding unit 53 , a pass-code comparison unit 54 , and a flow control unit 55 .
- the communication unit 51 communicates with components outside of the IC chip 50 such as portable terminal 10 and the external apparatus 100 .
- the data-holding unit 52 holds data (including value information such as electronic money and an electronic ticket) for applications.
- the pass-code-holding unit 53 holds pass-codes used for controlling accesses to the data-holding unit 52 .
- the pass-code-comparison unit 54 collates a pass-code input from the communication unit 51 with pass-codes held by the pass-code-holding unit 53 .
- the flow control unit 55 controls the output of the pass-code comparison in accordance with a condition for the pass-codes comparison.
- the communication unit 51 forms at least one of the radio interface 14 and the wire interface 15 , which are shown in FIG. 1.
- an electrical serial-communication means is carrying out a communication
- a specific meaning is given to a series of serial-communication data, making it possible to perform various kinds of processing.
- a variety of methods can be assumed for a method of transmitting data in the serial communication system. In this embodiment, data is exchanged in byte units as shown in FIG. 5.
- FIG. 6 shows a model of the configuration of a packet including pieces of one-byte data.
- the first half of the packet is a code portion whereas the second half of the packet is a data portion (or a payload).
- the code portion describes the data for the meaning of the packet.
- the data portion is attached if the data (the data main portion) added to the code portion is required.
- FIG. 7 shows a basic sequence of a packet exchange between the data-transmitting and receiving parties.
- the external apparatus 100 serves as the data-transmitting party while the IC chip 50 used as the pass-code identification device serves as the data-receiving party.
- a packet can be a command requesting an action from the data-transmitting party to the data-receiving party, or a response transmitted by the data-receiving party to the data-transmitting party as a result of the action to the command.
- Commands and responses used in this embodiment are shown in Table 1.
- a command's code portion of 10 h means that the data portion includes a pass-code to be supplied to the IC card 50 serving as the pass-code identification device.
- the data portion following the code portion is supplied to the pass-code-comparison unit 54 .
- the pass-code-comparison unit 54 compares the data portion received from the communication unit 51 with pass-codes held by the pass-code-holding unit 53 . If one of the pass-codes matches the data portion, the pass-code-comparison unit 54 generates a match output.
- the flow control unit 55 has a function to limit transfers of data between the data-holding unit 52 and the communication unit 51 .
- FIG. 8 shows the configuration of the flow control unit 55 .
- a valid/invalid flag 55 A is a flag determining whether a transmission line between the data-holding unit 52 and the communication unit 51 is connected state or unconnected state according to a comparison output by the pass-code-comparison unit 54 .
- the valid/invalid flag 55 A is set at a valid value of 1, a switch 2 is connected to the comparison output. If the pass-code-comparison unit 54 outputs a match comparison result, the output of transmitted to a switch 1 , and the switch 1 is put in an ON state to connect the communication unit 51 to the data-holding unit 52 by the transmission line. In this state, the external apparatus 100 is capable of making an access to the data-holding unit 52 by way of the communication unit 51 . If the pass-code-comparison unit 54 outputs a mismatch comparison result, on the other hand, the output of transmitted to the switch 1 , and the switch 1 is put in an OFF state to disconnect the communication unit 51 from the data-holding unit 52 by the transmission line. In this state, the external apparatus 100 is not capable of making an access to the data-holding unit 52 by way of the communication unit 51 .
- the switch 2 is put in an ON state all the time.
- the switch 1 is put in an ON state all the time to connect the communication unit 51 to the data-holding unit 52 by a transmission line independently of a comparison result output by the pass-code-comparison unit 54 .
- An invalid-to-valid flag 55 B is a flag that can be changed by a command's code portion of 50 h .
- the invalid-to-valid flag 55 B is a flag selecting whether or not an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag from an invalid value of 0 to a valid value of 1 by using a command's code portion of 40 h to be described later.
- the flag judgment unit 55 D puts the switch 3 in an ON state, allowing the valid/invalid flag 55 A to be changed from the communication unit 51 . If the invalid-to-valid flag is set at 0, however, the flag judgment unit 55 D puts the switch 3 in an ON state allowing the valid/invalid flag 55 A to be changed from the communication unit 51 .
- a valid-to-invalid flag 55 C is a flag that can be changed by a command's code portion of 60 h .
- the valid-to-invalid flag 55 C is a flag selecting whether or not an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag 55 A from a valid value of 1 to an invalid value of 0 by using a command's code portion of 40 h to be described later.
- the flag judgment unit 55 D puts the switch 3 in an ON state, allowing the valid/invalid flag 55 A to be changed from the communication unit 51 . If the valid-to-invalid flag is set at 0, the flag judgment unit 55 D puts the switch 3 in an ON state allowing the valid/invalid flag 55 A to be changed from the communication unit 51 .
- a command's code portion of 40 h is a command for changing the state of the valid/invalid flag 55 A. As described above, only if the switch 3 is put in an ON state, can the valid/invalid flag 55 A be changed from the communication unit 51 .
- the switch 1 can be put in an ON state connecting the data-holding unit 52 to the communication unit 51 .
- the external apparatus 100 is capable of reading out data from a predetermined location in the data-holding unit 52 a command code of 20 h or writing data into a predetermined location in the data-holding unit 52 by a command code of 30 h.
- a pass-code already stored in the pass-code-holding unit 53 can be renewed by using a command code of 18 h .
- an operation to renew a pass-code is controlled by using a switch 4 .
- the present embodiment is controlled by flag judgment unit 55 D in accordance with the state of the invalid-to-valid flag 55 B and the valid-to-invalid flag 55 C, the state of the valid/invalid flag 55 A, and the output of the pass-code-comparison unit 54 .
- the control condition of the switch 4 can be changed in accordance with the states of the flags.
- a pass-code already stored in the pass-code-holding unit 53 can be renewed when the invalid-to-valid flag 55 B is changed from 0 to 1.
- valid identification of a pass-code can be based on a new pass-code without regard to a pass-code set before the new pass-code.
- FIG. 9 shows a typical configuration the pass-code identification device (the IC card 50 ) including a plurality of pass-code-holding units and a plurality of pass-code-comparison units.
- the data-holding unit 52 is connected to the communication unit 51 only if all the pass-code-comparison units 54 each generate a match output.
- some external apparatuses each used for inputting a pass-code are each assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code are each assigned to an operator such as a person in charge of card services.
- the functions of pass-codes can be controlled in accordance with a judgment formed by an operator.
- the system can be set to forcibly require a pass-code input without regard to the wills of the individual users.
- FIG. 10 shows a typical configuration of the pass-code identification device (the IC card 50 ) in which a pass-code can be set to each of the memory area in the data-holding unit 52 .
- the pass-code-comparison unit 54 has a lookup table showing relations between memory areas allocated to the data-holding unit 52 and pass-codes. It is thus possible to form a judgment as to whether or not a pass-code received from the communication unit 51 matches a pass-code to which any of the memory areas is allocated. If a pass-code received from the communication unit 51 matches a pass-code to which any specific one of the memory areas is allocated, an access to the specific memory area can be made.
- Table 3 shown below is a typical configuration of the lookup table managed by the pass-code-comparison unit 54 . TABLE 3 Allowed memory Allowed memory Pass-code start address end address Pass-code 1 100h 180h Pass-code 2 300h 3A0h Pass-code 3
- the pass-code-comparison unit 54 compares a pass-code received from the communication unit 51 with every pass-code stored in the lookup table. It is then possible to make an access to a memory area of a memory space in the data-holding unit 52 if the memory area is allocated to a pass-code obtaining the match output.
- the embodiment explained in this specification implements a portable terminal such as a PDA and a portable telephone, which includes an embedded IC card provided by the present invention.
- a portable terminal such as a PDA and a portable telephone
- an embedded IC card provided by the present invention.
- the scope of the present invention is not limited to the embodiment. Also in the case of an IC card used as a standalone device or in the case of an IC card used as a device embedded in an apparatus having a different type, the effects of the present invention can be demonstrated as well.
- a pass-code identification device and a pass-code identification method that are capable of appropriately controlling accesses made by an external apparatus such a reader/writer to an internal memory of the pass-code identification device such as an IC card by collation of pass-codes.
Abstract
Description
- The present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses to predetermined information by collation of pass-codes. More particularly, the present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses made by an external apparatus by collation of pass-codes.
- To put it in detail, the present invention relates to a pass-code identification device and a pass-code identification method, which are used for controlling accesses made by an external apparatus such as a reader/writer to an internal memory of the pass-code identification device such as an IC card by collation of pass-codes. More particularly, the present invention relates to a pass-code identification device and a pass-code identification method, which are used for determining whether or not access-right control based on a pass-code is required.
- There has been conceived and put to practical use a variety of apparatus using a pass-number and/or a password for verifying a user and for authenticating process. (In general, “a pass-number” is defined as a string or a combination of numbers each having a value in the range 0 to 9 whereas a password is defined as a string or a combination of alphabetical characters. In this specification, “a pass-code” is a generic technical term for the pass-number and the password.)
- When the user of a cash card uses the cash card at a bank or an other financial institution, a cash dispenser typically urges the user to enter a pass-number or a password as a means for authenticating the user. The cash dispenser then carries out a withdrawal operation after verifying that the user has entered a correct pass-number or a correct password.
- There are other applications of a pass-code. Examples of the other applications are an operation to enter a pass-code to a safety box, which is installed in a hotel or an other lodging facility, in order to open the safety box, an operation to enter a password to a computer at a log-in, and an operation to enter a pass-code to an information terminal in order to request the terminal to conceal information.
- Traditionally, in a storage medium such as magnetic stripes on a cash card for a bank, only a storage area that is usable for the particular bank is provided. Thus, inputting a pass-number or a password is no more than accessing to this storage area. That is to say, the user needs to selectively use a plurality of cash cards for different purposes and/or different applications.
- By the way, in recent years, non-contact IC cards have been becoming popular. For example, a cash dispenser or an IC-card reader/writer installed at the entrance of a concert hall, a station, or the like, is capable of making an access to the IC card without contact. At the same time, the user enters a pass-number or a password to the IC-card reader side, and the IC card and the IC-card reader/writer collate the entered pass-number or the entered password with the fetched pass-number or the fetched password for verifying the user and for authenticating process. Then, if the verifying the user and authenticating process success, typically, an application stored in the IC card can be used. Examples of the application stored in the IC card include electronic money and an electronic ticket.
- In addition, in recent years, by virtue of improvements of miniaturization technologies, an IC card having a storage space with a relatively large size is introduced and has been becoming popular. In the conventional cash card or the like, only one storage area for one application can be provided. It is thus necessary for the user to carry a plurality of IC cards for different purposes and/or different applications. With an IC card having a storage space with a large size, however, a plurality of applications can be stored in such an IC card. For example, one IC card can be used for storing two or more applications such as electronic money for electronic financial settlements and electronic tickets each used for entering a specific concert hall. In this way, an IC card can be used for a variety of purposes and/or applications.
- Furthermore, it is possible to mount an IC card having a memory function with a large storage capacity (or an IC chip implementing a semiconductor IC card) on a portable telephone or a portable terminal. By carrying about such a portable terminal, the user is capable of exchanging electronic value information with an external apparatus such as mainly an apparatus used for electronic financial settlements.
- The conventional cash card is used for storing only one application (described above). Thus, by holding one pass-number or one password in magnetic stripes on a cash card, securities of all cards can be controlled.
- In the case of an IC card having a memory function capable of storing a plurality of applications or a portable terminal including such an IC card (or an IC chip) mounted thereon, on the other hand, it is necessary to control an access right for each application. This is because, if accesses can be made to all applications on an IC card by using only one pass-code, the security of the applications will deteriorate significantly in case of loss or theft of the IC card.
- In addition, after an IC card's memory area permitting accesses by inputting a pass-code has once be invalidated, the user must reenter the pass-code once more in order to restore the IC card to the validated state again. Thus, the IC card is bad usability.
- Furthermore, basically, only the owner of an IC card determines whether or not it is necessary to carry out an authentication process based on a pass-code before an access to information stored in the IC card can be made. Thus, there is no room for a person in charge of the system administration to intervene in the control of the security of the IC card.
- It is thus an object of the present invention to provide a pass-code identification device and a pass-code identification method that are capable of appropriately controlling accesses made by an external apparatus to the pass-code identification device by collation of pass-codes.
- It is thus another object of the present invention to provide a pass-code identification device and a pass-code identification method that are capable of appropriately controlling accesses made by an external apparatus such a reader/writer to an internal memory of the pass-code identification device such as an IC card by collation of pass-codes.
- It is thus a further object of the present invention to provide a pass-code identification device and a pass-code identification method that allow both the owner of an IC card and a person in charge of the administration of card services to appropriately determine whether or not access-right control based on a pass-code is required.
- In accordance with a first aspect of the present invention addressing the problems described above, there is provided a pass-code identification device, which is used for controlling accesses made by an external apparatus by collation of pass-codes. The pass-code identification device includes:
- a communication unit for communicating with the external apparatus;
- a data-holding unit for holding data;
- a pass-code-holding unit for holding a pass-code;
- a pass-code judgment unit for forming a judgment as to whether or not an input pass-code received from the external apparatus matches the pass-code held by the pass-code holding unit;
- a condition-setting unit for setting a condition for forming the judgment on the input pass-code; and
- a flow control unit for controlling accesses made by the external apparatus to the data-holding unit through the communication unit in accordance with the condition for forming the judgment on the input pass-code, which is a condition set by the condition-setting unit.
- The pass-code identification device provided in accordance with the first aspect of the present invention can be used for example as an IC card for controlling accesses to the IC card's memory having a relatively large storage capacity by collation of pass-codes.
- In this case, “the IC card” is generally a cartridge, which includes an IC chip and an antenna, having about the same size as a credit card. The IC chip itself can also be used as a device embedded in a portable terminal such as a portable telephone or a PDA or embedded in an other information-processing apparatus.
- The IC card can also be used by inserting the card into an information-processing apparatus. An IC chip or an IC card can be used as a prepaid device having a function related to value information such as electronic money and electronic tickets. The function of an IC chip or an IC card is referred to as “an application”.
- The memory area of an IC card is typically used for storing value information such as electronic money and electronic tickets for more than one application. For each of the applications, a pass-code such as a pass-number or a password is set. Pass-codes are collated with each other to control a right of an access to an application. To put it in detail, the IC card collates a pass-code entered to the IC card by the user with a pass-code stored in the application in advance and, only if the pass-codes match each other, does the IC card permit an access to the application.
- In the pass-code identification device provided in accordance with the first aspect of the present invention, the condition-setting unit determines whether or not the pass-code judgment unit needs to form the judgment on the input pass-code. Then, the flow control unit permits an access made by the external apparatus to the data-holding unit through the communication unit if the condition-setting unit determines that the pass-code judgment unit does not need to form the judgment on the input pass-code. In addition, if the condition-setting unit determines that the pass-code judgment unit needs to form the judgment on the input pass-code and the pass-code judgment unit outputs a judgment result revealing that the input pass-code matches the pass-code held by the pass-code-holding unit, the flow control unit also permits an access made by the external apparatus to the data-holding unit through the communication unit. In order to permit an access made by the external apparatus to data held by the data-holding unit the flow control unit puts the data-holding unit in a state of being connected to the communication unit.
- In addition, the condition-setting unit can be provided with a first judgment-necessity-holding means for holding information indicating whether or not the pass-code judgment unit needs to form the judgment on the input pass-code; a second judgment-necessity-holding means for holding information indicating whether or not an input pass-code is required for changing the first judgment-necessity-holding means from a state of holding information indicating that the pass-code judgment unit needs to form the judgment on the input pass-code to a state of holding information indicating that the pass-code judgment unit does not need to form the judgment on the input pass-code; and a third judgment-necessity-holding means for holding information indicating whether or not an input pass-code is required for changing the first judgment-necessity-holding means from a state of holding information indicating that the pass-code judgment unit does not need to form the judgment on the input pass-code to a state of holding information indicating that the pass-code judgment unit needs to form the judgment on the input pass-code.
- Thus, the condition-setting unit is capable of setting a condition for forming the judgment on the input pass-code in accordance with the information held by the first judgment-necessity-holding means, the information held by the second judgment-necessity-holding means, and the information held by the third judgment-necessity-holding means. That is to say, it is possible to set a change of a pass-code from a valid state to an invalid state and from an invalid state to a valid state by putting conditions for entering a pass-code in a variety of combinations. For example, in order to change a pass-code from an invalid state to a valid state in an operation to change a pass-code, it is not necessary to enter a pass-code. In order to change a pass-code from a valid state to an invalid state in an operation to change a pass-code, on the other hand, it is necessary to enter a pass-code.
- In addition, it is possible to provide the pass-code identification device's implementation wherein the pass-code-holding unit holds a plurality of pass-codes; the pass-code judgment unit forms a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes held by the pass-code holding unit; and the flow control unit permits an access made by the external apparatus to the data-holding unit through the communication unit if the condition-setting unit determines that the pass-code judgment unit needs to form the judgment on the input pass-code and the pass-code judgment unit outputs a judgment result revealing that the input pass-code matches all the pass-codes held by the pass-code-holding unit.
- With this implementation, some external apparatuses each used for inputting a pass-code can each be assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code can each be assigned to an operator (such as a person in charge of card services). In this way, the functions of pass-codes can be controlled in accordance with a judgment formed by an operator. For example, the system can be set to forcibly require a pass-code input without regard to the wills of the individual users.
- In addition, it is also possible to provide the pass-code identification device's other implementation wherein the pass-code-holding unit holds a plurality of pass-codes each associated with a memory area in the data-holding unit the pass-code judgment unit forms a judgment as to whether or not an input pass-code received from the external apparatus through the communication unit matches each of the pass-codes held by the pass-code holding unit; and the flow control unit permits an access made by the external apparatus to a specific memory area through the communication unit if the condition-setting unit determines that the pass-code judgment unit needs to form the judgment on the input pass-code and the pass-code judgment unit outputs a judgment result revealing that the input pass-code matches one of the stored pass-codes that is associated with the specific memory area.
- It is thus possible to make an access to a memory area of a memory space in the data-holding unit if the memory area is allocated to a pass-code matching an input pass-code.
- By providing the external apparatus with a card reader, the external apparatus is capable of making an access to the IC chip through a radio interface. Also in this case, rights of accesses to a memory area such as that of an IC chip are controlled by collation of pass-codes. After a locked state of an information-processing apparatus including an embedded IC chip is unlocked by entering a pass-code to the information-processing apparatus, a radio connection between the information-processing apparatus and the external apparatus can be established and an access to the memory area is permitted. As an alternative, after a radio connection between the IC chip embedded in the information-processing apparatus and the external apparatus is established, access rights are controlled on the basis of pass-codes entered to the external apparatus.
- In addition, in accordance with a second aspect of the present invention, there is provided a pass-code identification method, which is used for controlling accesses made by an external apparatus to predetermined data by collation of pass-codes. The pass-code identification method includes a pass-code judgment step of forming a judgment as to whether or not an input pass-code received from the external apparatus matches a pass-code set for the predetermined data; a condition-setting step of setting a condition for forming the judgment on the input pass-code; and a flow control step of controlling accesses made by the external apparatus to the predetermined data in accordance with the condition for forming the judgment on the input pass-code, which is a condition set at the condition-setting step.
- The pass-code identification method provided in accordance with the second aspect of the present invention can be adopted for example in an IC card for controlling accesses to the IC card's memory having a relatively large storage capacity by collation of pass-codes.
- The memory area of an IC card is typically used for storing value information such as electronic money and electronic tickets for more than one application. For each of the applications, a pass-code such as a pass-number or a password is set. Pass-codes control a right of an access. To put it in detail, the IC card collates a pass-code entered to the IC card by the user with a pass-code stored in the application in advance and, only if the pass-codes match each other, does the IC card permit an access to the application.
- In the pass-code identification method provided in accordance with the second aspect of the present invention, the condition-setting step is executed also to determine whether or not it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code. Then, at the flow control step, an access made by the external apparatus to the predetermined data is permitted if a result of execution of the condition-setting step indicates that the pass-code judgment step of forming the judgment on the input pass-code is not necessary. An access made by the external apparatus to the predetermined data is also permitted at the flow control step if a result of execution of the condition-setting step indicates that the pass-code judgment step of forming the judgment on the input pass-code is necessary and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches a pass-code set for the predetermined data.
- The condition-setting step may include a first judgment-necessity-holding step of managing information indicating whether or not it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code; a second judgment-necessity-holding step of managing information indicating whether or not an input pass-code is required for changing information from a value indicating that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code to a value indicating that it is not necessary to execute the pass-code judgment step of forming the judgment on the input pass-code; and a third judgment-necessity-holding step of managing information indicating whether or not an input pass-code is required for changing information from a value indicating that it is not necessary to execute the pass-code judgment step of forming the judgment on the input pass-code to a value indicating that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code.
- In this case, at the condition-setting step, a condition for forming the judgment on the input pass-code is set in accordance with the information managed by the first judgment-necessity-holding step, the information managed by the second judgment-necessity-holding step, and the information managed by the third judgment-necessity-holding step. That is to say, it is possible to set a change of a pass-code from a valid state to an invalid state and from an invalid state to a valid state by putting conditions for entering a pass-code in a variety of combinations. For example, in order to change a pass-code from an invalid state to a valid state in an operation to change a pass-code, it is not necessary to enter a pass-code. In order to change a pass-code from a valid state to an invalid state in an operation to change a pass-code, on the other hand, it is necessary to enter a pass-code.
- In addition, a plurality of pass-codes may be set for predetermined data to be accessed. In this case, at the pass-code judgment step, a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes set for predetermined data is formed. Furthermore, at the flow control step, an access made by the external apparatus to the predetermined data is permitted if a result of execution of the condition-setting step determines that it is necessary to execute the pass-code judgment step of forming the judgment on the input pass-code and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches all the pass-codes set for predetermined data.
- With this implementation, some external apparatuses each used for inputting a pass-code can each be assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code can each be assigned to an operator such as a person in charge. In this way, the functions of pass-codes can be controlled in accordance with a judgment formed by an operator. For example, the system can be set to forcibly require a pass-code input without regard to the wills of the individual users.
- In addition, a plurality of pass-codes may be set, each being associated with a memory area. In this case, at the pass-code judgment step, a judgment as to whether or not an input pass-code received from the external apparatus matches each of the pass-codes each associated with a memory area is formed. Furthermore, at the flow control step, an access made by the external apparatus to a specific memory area is permitted if a result of execution of the condition-setting step determines that it is necessary to execute the judgment on the input pass-code and an output result of the judgment formed at the pass-code judgment step reveals that the input pass-code matches one of the stored pass-codes that is associated with the specific memory area.
- It is thus possible to make an access to a memory area of a memory space in the data-holding unit if the memory area is allocated to a pass-code matching an input pass-code.
- The present invention's other objects, features, and merits will become more apparent from a later detailed explanation of a preferred embodiment of the present invention with reference to accompanying diagrams.
- FIG. 1 is a diagram showing a model of the hardware configuration of a
portable terminal 10 implemented by an embodiment of the present invention. - FIG. 2 is an explanatory diagram conceptually showing a mechanism of radio communication based on electromagnetic induction between a reader/
writer 101 and anIC chip 50. - FIG. 3 is a diagram showing a transformer model representing a system including the reader/
writer 101 and theIC card 50. - FIG. 4 is an explanatory diagram showing a model of a functional configuration of the
IC card 50 embedded in aportable terminal 10 implemented by the embodiment. - FIG. 5 is a diagram showing a model of one-byte data transmitted and received through a
communication unit 51. - FIG. 6 is a diagram showing a model of the configuration of a packet including pieces of one-byte data.
- FIG. 7 is a diagram showing a basic sequence of a packet exchange between the data-transmitting and receiving parties.
- FIG. 8 is a diagram showing the configuration of a
flow control unit 55. - FIG. 9 is a block diagram showing a typical configuration of the pass-code identification device (the IC card50) including a plurality of pass-code-holding units and a plurality of pass-code-comparison units.
- FIG. 10 is a block diagram showing a typical configuration of the pass-code identification device (the IC card50) in which a pass-code can be set to each of the memory are in the
data holding unit 52. - A preferred embodiment of the present invention is described by referring to accompanying diagrams as follows.
- FIG. 1 shows a model of the hardware configuration of a
portable terminal 10 implemented by an embodiment of the present invention. Designed into a small size and a small weight like a portable telephone, a PDA (Personal Digital Assistant) or the like, theportable terminal 10 is an information-processing terminal that can be carried about by the user all the time. - The
portable terminal 10 includes anIC card 50, acontroller 11, auser input unit 12 and adisplay unit 13. Used for carrying out radio communication with an external apparatus, theIC card 50 includes a memory function. Thecontroller 11 controls internal operations of theportable terminal 10 in an integrated manner. Theuser input unit 12 is composed of components such as keys and buttons used by the user for entering a variety of character strings such as mainly a pass-number and a password and entering commands. Thedisplay unit 13 is typically an LCD (Liquid Crystal Display) for displaying a result of a process on a screen. It is needless to say that, in order to implement native functions of theportable terminal 10, theportable terminal 10 may be provided also with peripheral devices and circuit components other than those shown in the figure. - The
controller 11 includes components such as a CPU (Central Processing Unit), a ROM (Read-Only Memory), and a RAM (Random Access Memory), which are incorporated in a single unit. By executing program codes stored in advance in the ROM, thecontroller 11 controls a variety of operations in theportable terminal 10. - The
IC card 50 has aradio interface 14 for establishing a radio connection with theexternal apparatus 100 and awire interface 15 for establishing a wire connection with thecontroller 11 employed in theportable terminal 10. As theradio interface 14, it is possible to employ a contact interface standard defined by ISO 7816 or a radio interface standard defined by ISO 14443. A technique of connection between theIC chip 50 and theexternal apparatus 100 will be described later. - The
IC chip 50 typically adopts a technology developed for a non-contact IC card. In accordance with this technology, theIC chip 50 is driven by an electromagnetic wave generated by theexternal apparatus 100 through theradio interface 14. In other words, with the user unholding theportable terminal 10 over theexternal apparatus 100, the electromagnetic wave generated by theexternal apparatus 100 does not reach theportable terminal 10 anymore. In this state, theIC chip 50 ceases to operate. In addition, in this embodiment, the right of an access to the inside of theIC chip 50 is revoked in response to an event in which the electromagnetic wave is interrupted. - Furthermore, the
IC card 50 provided by the present invention has a memory area having a relatively large size. Such a memory area is brought by the miniaturization technology and the like. The memory area is implemented by a semiconductor memory, magnetic stripes, or an other writable and readable storage medium. One or more applications are assigned to the memory area. Examples of the application are pieces of value information such as mainly electronic money and electronic tickets. - In order to protect this type of value information from misuse and thefts, a pass-code such as a pass-number or a password is set for each of the applications. In this way, an access right can be controlled for each application. For example, a pass-code input by way of the
radio interface 14 or thewire interface 15 is compared with a pass-code set for an application. If the pass-code input by way of theradio interface 14 or thewire interface 15 matches the pass-code set for the application, an access to the application is granted (will be described later). - The
external apparatus 100 is an apparatus utilizing an application assigned to the memory area in theIC card 50. Typically, theexternal apparatus 100 includes a reader/writer 101, which establishes a connection with theIC chip 50 by applying a technology developed for a non-contact IC card. In addition, theexternal apparatus 100 also has circuit components and peripheral devices for carrying out arithmetic processing of specific jobs and an input unit and an output unit for interactive input with the user (which are not shown in the figure). - The
external apparatus 100 includes an apparatus for using electronic money, an apparatus for processing electronic value information, and an apparatus for verifying a user and for authenticating process. The example of the apparatus for using electronic money is an ATM (Automatic Teller Machine) installed at a bank. The example of the apparatus for processing electronic value information is an apparatus using electronic tickets at a gate of a concert hall and a ticket wicket of a station or an airport. The example of the apparatus for verifying a user and for authenticating process is a safety box installed at a hotel or a lodging facility. - In accordance with a system configuration shown in FIG. 1, the user enters a pass-code to the
portable terminal 10 via theuser input unit 12 to unlock a locked state. In some cases, the pass-code entered by the user is displayed on thedisplay unit 13 for confirmation before being supplied to theIC chip 50 embedded in theportable terminal 10 by way of thewire interface 15. Then, theIC chip 50 collates the pass-code entered by the user with pass-codes set for applications or for directories in memory areas. The user is then given a right of an access to a memory area allocated to the matched application or a directory. As an alternative, accesses to the applications are controlled on the basis of pass-codes, which are received from theexternal apparatus 100 after a radio connection is established between theIC chip 50 employed in theportable terminal 10 and theexternal apparatus 100. - Radio communications between the reader/
writer 101 and theIC card 50 are accomplished on the basis of typically a principle of electromagnetic induction. FIG. 2 is an explanatory diagram conceptually showing a mechanism of the radio communication between the reader/writer 101 based on electromagnetic induction and theIC card 50. As shown in the figure, the reader/writer 101 has an antenna LRW implemented as a loop coil. A magnetic field is generated in areas surrounding the antenna LRW by a current IRW flowing through the antenna LRW. On the other hand, a loop coil Lc is electrically formed in an area surrounding theIC card 50. An induction voltage induced by the magnetic field generated by the loop antenna Lc of the reader/writer 101 side appears at the terminals of the loop coil Lc at theIC chip 50 side and applied to the terminals of theIC card 50, which are connected to the terminals of the loop coil Lc. - The degree of coupling between the antenna LRW of the reader/
writer 101 and the loop coil Lc of theIC chip 50 varies in dependence on the positional relation between the antennal LRW of the reader/writer 101 and the loop coil Lc of theIC chip 50. The antenna LRW of the reader/writer 101 and the loop coil Lc of theIC chip 50 can be interpreted as a system functioning as a transformer. That is to say, the reader/writer 101 and theIC chip 50 can be expressed model shown in FIG. 3. - The reader/
writer 101 modulates a current IRW flowing through the antenna LRW in order to modulate a voltage Vo induced in the loop coil Lc of theIC card 50. The modulation of the current IRW and the modulation of the induced voltage Vo are used for transmitting data from the reader/writer 101 to theIC card 50. The transmitted data includes a pass-code for getting a right of an access to an application and value information for an application. The pass-code is a pass-number or a password entered by the user to theexternal apparatus 100. Examples of the value information are electronic money and an electronic ticket. - In addition, the
IC chip 50 has a load-switching function for changing a load between the terminals of the loop coil Lc in accordance with data to be transmitted as a response to the reader/writer 101. When the load between the terminals of the loop coil Lc is varied, the impedance between the terminals of the antenna employed in the reader/writer 101 also changes. When the impedance between the terminals of the antenna employed in the reader/writer 101 changes, a current IRW flowing through the antenna LRW and a voltage VRW appearing between the terminals of the antenna LRW also change. By demodulating the changing current IRW or the changing voltage VRW, the reader/writer 101 is capable of obtaining the data transmitted as a response by theIC card 50. The data obtained by theexternal apparatus 100 from theIC card 50 includes value information such as electronic money and an electronic ticket, which are provided by applications. - FIG. 4 is an explanatory diagram showing a model of a functional configuration of the
IC card 50 embedded in theportable terminal 10 implemented by the embodiment. - The
IC card 50 serves as the pass-code identification device provided by the present invention. As shown in the figure, theIC card 50 has acommunication unit 51, a data-holdingunit 52, a pass-code-holdingunit 53, a pass-code comparison unit 54, and aflow control unit 55. Thecommunication unit 51 communicates with components outside of theIC chip 50 such asportable terminal 10 and theexternal apparatus 100. The data-holdingunit 52 holds data (including value information such as electronic money and an electronic ticket) for applications. The pass-code-holdingunit 53 holds pass-codes used for controlling accesses to the data-holdingunit 52. The pass-code-comparison unit 54 collates a pass-code input from thecommunication unit 51 with pass-codes held by the pass-code-holdingunit 53. Theflow control unit 55 controls the output of the pass-code comparison in accordance with a condition for the pass-codes comparison. - The
communication unit 51 forms at least one of theradio interface 14 and thewire interface 15, which are shown in FIG. 1. When an electrical serial-communication means is carrying out a communication, for example, a specific meaning is given to a series of serial-communication data, making it possible to perform various kinds of processing. A variety of methods can be assumed for a method of transmitting data in the serial communication system. In this embodiment, data is exchanged in byte units as shown in FIG. 5. - In FIG. 5, the one-byte data that is always preceded by a start bit. The start bit is then followed by the eight bits of the data, which is followed by a stop bit. The length of each bit is fixed and determined in advance by the data-transmitting and receiving parties.
- FIG. 6 shows a model of the configuration of a packet including pieces of one-byte data. As shown in the figure, the first half of the packet is a code portion whereas the second half of the packet is a data portion (or a payload). The code portion describes the data for the meaning of the packet. The data portion is attached if the data (the data main portion) added to the code portion is required.
- FIG. 7 shows a basic sequence of a packet exchange between the data-transmitting and receiving parties. In this embodiment, the
external apparatus 100 serves as the data-transmitting party while theIC chip 50 used as the pass-code identification device serves as the data-receiving party. - A packet can be a command requesting an action from the data-transmitting party to the data-receiving party, or a response transmitted by the data-receiving party to the data-transmitting party as a result of the action to the command. Commands and responses used in this embodiment are shown in Table 1.
TABLE 1 Command Response (External apparatus to (identification device identification device) to external apparatus) Code Data Code Data portion portion portion portion Meaning 10h Pass-code 12h OK/NG Pass-code input 18h Pass-code 1Ah OK/NG Pass-code change 20h Read location 22h OK (Read- Read-out data out data)/NG 30h Written data 32h OK/NG Written data and write location 40h Flag value 42h OK/NG Valid/Invalid Change 50h Flag value 52h OK/NG Invalid −> Valid Change 60h Flag value 54h OK/NG Valid −> Invalid Change - A command's code portion of10 h means that the data portion includes a pass-code to be supplied to the
IC card 50 serving as the pass-code identification device. As a result of interpretation of this code portion by thecommunication unit 51, the data portion following the code portion is supplied to the pass-code-comparison unit 54. - The pass-code-
comparison unit 54 compares the data portion received from thecommunication unit 51 with pass-codes held by the pass-code-holdingunit 53. If one of the pass-codes matches the data portion, the pass-code-comparison unit 54 generates a match output. Theflow control unit 55 has a function to limit transfers of data between the data-holdingunit 52 and thecommunication unit 51. - FIG. 8 shows the configuration of the
flow control unit 55. - A valid/
invalid flag 55A is a flag determining whether a transmission line between the data-holdingunit 52 and thecommunication unit 51 is connected state or unconnected state according to a comparison output by the pass-code-comparison unit 54. - If the valid/
invalid flag 55A is set at a valid value of 1, aswitch 2 is connected to the comparison output. If the pass-code-comparison unit 54 outputs a match comparison result, the output of transmitted to aswitch 1, and theswitch 1 is put in an ON state to connect thecommunication unit 51 to the data-holdingunit 52 by the transmission line. In this state, theexternal apparatus 100 is capable of making an access to the data-holdingunit 52 by way of thecommunication unit 51. If the pass-code-comparison unit 54 outputs a mismatch comparison result, on the other hand, the output of transmitted to theswitch 1, and theswitch 1 is put in an OFF state to disconnect thecommunication unit 51 from the data-holdingunit 52 by the transmission line. In this state, theexternal apparatus 100 is not capable of making an access to the data-holdingunit 52 by way of thecommunication unit 51. - If the valid/
invalid flag 55A is set at an invalid value of 0, on the other hand, theswitch 2 is put in an ON state all the time. Theswitch 1 is put in an ON state all the time to connect thecommunication unit 51 to the data-holdingunit 52 by a transmission line independently of a comparison result output by the pass-code-comparison unit 54. - The reader is expected to fully understand that, by using the valid/
invalid flag 55A, the function of the pass-code-comparison can be suppressed if the function is not required. - An invalid-to-
valid flag 55B is a flag that can be changed by a command's code portion of 50 h. The invalid-to-valid flag 55B is a flag selecting whether or not an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag from an invalid value of 0 to a valid value of 1 by using a command's code portion of 40 h to be described later. If the invalid-to-valid flag 55B is set at 1, the valid/invalid flag 55A is set at 0 indicating an invalid result of pass-code comparison and the pass-code-comparison unit 54 generates a match output, theflag judgment unit 55D puts theswitch 3 in an ON state, allowing the valid/invalid flag 55A to be changed from thecommunication unit 51. If the invalid-to-valid flag is set at 0, however, theflag judgment unit 55D puts theswitch 3 in an ON state allowing the valid/invalid flag 55A to be changed from thecommunication unit 51. - Thus, if the invalid-to-
valid flag 55B is set at 1, an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag 55A from an invalid value to a valid value. If the invalid-to-valid flag 55B is set at 0, on the other hand, an entered pass-code is not required to match a stored pass-code in order to change the valid/invalid flag 55A from an invalid value to a valid value. - On the other hand, a valid-to-
invalid flag 55C is a flag that can be changed by a command's code portion of 60 h. The valid-to-invalid flag 55C is a flag selecting whether or not an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag 55A from a valid value of 1 to an invalid value of 0 by using a command's code portion of 40 h to be described later. If the valid-to-invalid flag 55C is set at 1, the valid/invalid flag 55A is set at 1 indicating a valid result of pass-code comparison and the pass-code-comparison unit 54 generates a match output, theflag judgment unit 55D puts theswitch 3 in an ON state, allowing the valid/invalid flag 55A to be changed from thecommunication unit 51. If the valid-to-invalid flag is set at 0, theflag judgment unit 55D puts theswitch 3 in an ON state allowing the valid/invalid flag 55A to be changed from thecommunication unit 51. - Thus, if the valid-to-
invalid flag 55C is set at 1, an entered pass-code is required to match a stored pass-code in order to change the valid/invalid flag 55A from a valid value to an invalid value. If the valid-to-invalid flag 55C is set at 0, on the other hand, an entered pass-code is not required to match a stored pass-code in order to change the valid/invalid flag 55A from a valid value to an invalid value. - As described above, the operations to change the state of the valid/invalid flag are controlled by the
flag judgment unit 55D. The outputs of theflag judgment unit 55D determining the operations are summarized in Table 2 as follows.TABLE 2 Valid/invalid 1 0 Comparison output Comparison output Match Mismatch Match Mismatch Invalid −−> Valid 1 0 0 1 0 0 0 0 1 1 Valid −−> Invalid 1 1 0 0 0 0 1 1 0 0 - A command's code portion of40 h is a command for changing the state of the valid/
invalid flag 55A. As described above, only if theswitch 3 is put in an ON state, can the valid/invalid flag 55A be changed from thecommunication unit 51. - In accordance with the above mechanism, it is possible to set conditions for entering a pass-code in a variety of combinations. For example, in order to change a pass-code from an invalid state to a valid state in an operation to change a pass-code, it is not necessary to enter a pass-code. In order to change a pass-code from a valid state to an invalid state, on the other hand, it is necessary to enter a pass-code.
- By carrying out the operations described above, the
switch 1 can be put in an ON state connecting the data-holdingunit 52 to thecommunication unit 51. With the data-holdingunit 52 connected to thecommunication unit 51, theexternal apparatus 100 is capable of reading out data from a predetermined location in the data-holding unit 52 a command code of 20 h or writing data into a predetermined location in the data-holdingunit 52 by a command code of 30 h. - A pass-code already stored in the pass-code-holding
unit 53 can be renewed by using a command code of 18 h. In this case, an operation to renew a pass-code is controlled by using aswitch 4. - As described earlier, the present embodiment is controlled by
flag judgment unit 55D in accordance with the state of the invalid-to-valid flag 55B and the valid-to-invalid flag 55C, the state of the valid/invalid flag 55A, and the output of the pass-code-comparison unit 54. Thus, the control condition of theswitch 4 can be changed in accordance with the states of the flags. For example, a pass-code already stored in the pass-code-holdingunit 53 can be renewed when the invalid-to-valid flag 55B is changed from 0 to 1. By renewing a pass-code, valid identification of a pass-code can be based on a new pass-code without regard to a pass-code set before the new pass-code. - In the embodiment described above, by using a simple command, a setting can be changed. By inserting a mutual-authentication means into a path between the
communication unit 51 and theexternal apparatus 100, the level of security can be raised. - The present invention can also be applied to an application in which accesses to the
IC chip 50 are controlled by using a plurality of pass-codes assigned to the same plurality of applications stored in an extended memory employed in theIC chip 50. FIG. 9 shows a typical configuration the pass-code identification device (the IC card 50) including a plurality of pass-code-holding units and a plurality of pass-code-comparison units. - In the typical configuration shown in FIG. 9, the data-holding
unit 52 is connected to thecommunication unit 51 only if all the pass-code-comparison units 54 each generate a match output. In this application, some external apparatuses each used for inputting a pass-code are each assigned to an individual user utilizing this system while some other external apparatuses each used for inputting a pass-code are each assigned to an operator such as a person in charge of card services. In this way, the functions of pass-codes can be controlled in accordance with a judgment formed by an operator. For example, the system can be set to forcibly require a pass-code input without regard to the wills of the individual users. - FIG. 10 shows a typical configuration of the pass-code identification device (the IC card50) in which a pass-code can be set to each of the memory area in the data-holding
unit 52. - The pass-code-
comparison unit 54 has a lookup table showing relations between memory areas allocated to the data-holdingunit 52 and pass-codes. It is thus possible to form a judgment as to whether or not a pass-code received from thecommunication unit 51 matches a pass-code to which any of the memory areas is allocated. If a pass-code received from thecommunication unit 51 matches a pass-code to which any specific one of the memory areas is allocated, an access to the specific memory area can be made. Table 3 shown below is a typical configuration of the lookup table managed by the pass-code-comparison unit 54.TABLE 3 Allowed memory Allowed memory Pass-code start address end address Pass- code 1100h 180h Pass- code 2300h 3A0h Pass- code 3 - With such a configuration, the pass-code-
comparison unit 54 compares a pass-code received from thecommunication unit 51 with every pass-code stored in the lookup table. It is then possible to make an access to a memory area of a memory space in the data-holdingunit 52 if the memory area is allocated to a pass-code obtaining the match output. - An embodiment of the present invention has been explained in detail so far. It is obvious, however, that a person skilled in the art is capable of making a variety of changes to the embodiment and designing a substitute for the embodiment within a range not departing from essentials of the present invention.
- The embodiment explained in this specification implements a portable terminal such as a PDA and a portable telephone, which includes an embedded IC card provided by the present invention. However, the scope of the present invention is not limited to the embodiment. Also in the case of an IC card used as a standalone device or in the case of an IC card used as a device embedded in an apparatus having a different type, the effects of the present invention can be demonstrated as well.
- In a word, the embodiment is no more than a typical implementation of the present invention and is therefore not to be interpreted as limitations to the present invention. That is to say, the scope of the present invention is defined by claims appended to this specification.
- In accordance with an aspect of the present invention, it is possible to provide an excellent pass-code identification device and an excellent pass-code identification method that are capable of properly controlling accesses made by an external apparatus by collation of pass-codes.
- In accordance with another aspect of the present invention, it is possible to provide a pass-code identification device and a pass-code identification method that are capable of appropriately controlling accesses made by an external apparatus such a reader/writer to an internal memory of the pass-code identification device such as an IC card by collation of pass-codes.
- In accordance with a further aspect of the present invention, it is to provide a pass-code identification device and a pass-code identification method that allow to appropriately determine whether or not access-right control based on a pass-code is required.
Claims (11)
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2001195398A JP4240851B2 (en) | 2001-06-27 | 2001-06-27 | PIN code identification device and PIN code identification method |
JP2001-195398 | 2001-06-27 | ||
PCT/JP2002/006321 WO2003003292A1 (en) | 2001-06-27 | 2002-06-25 | Password identification apparatus and password identification method |
Publications (2)
Publication Number | Publication Date |
---|---|
US20040046017A1 true US20040046017A1 (en) | 2004-03-11 |
US6932269B2 US6932269B2 (en) | 2005-08-23 |
Family
ID=19033376
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US10/362,819 Expired - Lifetime US6932269B2 (en) | 2001-06-27 | 2002-06-25 | Pass-code identification device and pass-code identification method |
Country Status (6)
Country | Link |
---|---|
US (1) | US6932269B2 (en) |
EP (1) | EP1403815A4 (en) |
JP (1) | JP4240851B2 (en) |
CN (1) | CN1236388C (en) |
HK (1) | HK1063231A1 (en) |
WO (1) | WO2003003292A1 (en) |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060114713A1 (en) * | 2004-11-30 | 2006-06-01 | Daniel Braun | MRAM with coil for creating offset field |
US20080030292A1 (en) * | 2006-07-21 | 2008-02-07 | Fumio Kubono | Electromagnetic Induction Type Processing Apparatus |
US20080271161A1 (en) * | 2004-11-23 | 2008-10-30 | Koninklijke Philips Electronics N.V. | Method and Apparatus for Transferring a Data Carrier of a First System to a Second System |
US20080310602A1 (en) * | 2007-06-12 | 2008-12-18 | Microsoft Corporation | Messaging with a locked communication device |
US10819706B2 (en) * | 2018-07-09 | 2020-10-27 | Igt | System, apparatus and method for facilitating remote gaming communications in a venue |
US11151231B2 (en) | 2007-09-27 | 2021-10-19 | Clevx, Llc | Secure access device with dual authentication |
US11190936B2 (en) * | 2007-09-27 | 2021-11-30 | Clevx, Llc | Wireless authentication system |
US11233630B2 (en) | 2007-09-27 | 2022-01-25 | Clevx, Llc | Module with embedded wireless user authentication |
Families Citing this family (15)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4682498B2 (en) * | 2003-04-09 | 2011-05-11 | ソニー株式会社 | Communication device and memory management method for communication device |
US20050027927A1 (en) * | 2003-07-31 | 2005-02-03 | Weirauch Charles R. | Data storage media with sector data control information |
FR2873471B1 (en) * | 2004-07-26 | 2006-10-13 | Ascom Sa | NON-CONTACT MEMORY CARD SYSTEM WITH PASSWORD |
US8643595B2 (en) * | 2004-10-25 | 2014-02-04 | Sipix Imaging, Inc. | Electrophoretic display driving approaches |
DE102005005938B4 (en) * | 2005-02-09 | 2009-04-30 | Qimonda Ag | Resistive memory element with shortened erase time, method of manufacture and memory cell arrangement |
JP2006236064A (en) * | 2005-02-25 | 2006-09-07 | Oki Electric Ind Co Ltd | Memory control device and memory system |
US20070176912A1 (en) * | 2005-12-09 | 2007-08-02 | Beames Michael H | Portable memory devices with polymeric displays |
JP2008139923A (en) * | 2006-11-30 | 2008-06-19 | Dainippon Printing Co Ltd | Ic card having shared object, access management method to shared object and ic card program |
US8011592B2 (en) * | 2007-01-19 | 2011-09-06 | Sipix Imaging, Inc. | Temperature management in an integrated circuit card with electrophoretic display |
US8274472B1 (en) | 2007-03-12 | 2012-09-25 | Sipix Imaging, Inc. | Driving methods for bistable displays |
US8243013B1 (en) | 2007-05-03 | 2012-08-14 | Sipix Imaging, Inc. | Driving bistable displays |
US20080303780A1 (en) | 2007-06-07 | 2008-12-11 | Sipix Imaging, Inc. | Driving methods and circuit for bi-stable displays |
US8462102B2 (en) * | 2008-04-25 | 2013-06-11 | Sipix Imaging, Inc. | Driving methods for bistable displays |
CN102113046B (en) * | 2008-08-01 | 2014-01-22 | 希毕克斯影像有限公司 | Gamma adjustment with error diffusion for electrophoretic displays |
US9460666B2 (en) * | 2009-05-11 | 2016-10-04 | E Ink California, Llc | Driving methods and waveforms for electrophoretic displays |
Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4766293A (en) * | 1986-06-26 | 1988-08-23 | Visa International Service Association | Portable financial transaction card capable of authorizing a transaction in foreign currencies |
US5034596A (en) * | 1988-04-30 | 1991-07-23 | Kabushiki Kaisha Toshiba | IC card processing apparatus |
US5497411A (en) * | 1994-03-14 | 1996-03-05 | Pellerin; Joseph C. E. | Telecommunications card-access system |
US5594227A (en) * | 1995-03-28 | 1997-01-14 | Microsoft Corporation | System and method for protecting unauthorized access to data contents |
US5608902A (en) * | 1993-12-10 | 1997-03-04 | Kabushiki Kaisha Toshiba | File management system for memory card |
US5910652A (en) * | 1996-01-31 | 1999-06-08 | Kabushiki Kaisha Toshiba | Portable terminal apparatus for an IC card for supplying a power source voltage in a predetermined timing |
US6059191A (en) * | 1996-03-14 | 2000-05-09 | Siemens Aktiengesellschaft | Chip card |
US6226199B1 (en) * | 1999-09-17 | 2001-05-01 | Fujitsu Limited | Non-volatile semiconductor memory |
US6273335B1 (en) * | 1998-03-05 | 2001-08-14 | Visa International Service Association | System and method for locking and unlocking an application in a smart card |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPS62148820A (en) | 1985-12-23 | 1987-07-02 | Miyata Seiki Seisakusho:Kk | Overload detecting and automatic stopping device |
JPS6454165A (en) | 1987-08-26 | 1989-03-01 | Toshiba Corp | Controller for air blast amount of air conditioner |
JP2501050Y2 (en) * | 1987-09-29 | 1996-06-12 | シチズン時計株式会社 | IC card |
JPH1097468A (en) | 1996-09-19 | 1998-04-14 | Toshiba Corp | Data recording and reproducing device, and security managing method |
JP2001087480A (en) | 1999-09-27 | 2001-04-03 | Okumura Yu-Ki Co Ltd | Activation start/non-start selector for picture pattern variation or accessory variation for pachinko machine and pachinko machine provided with the same |
-
2001
- 2001-06-27 JP JP2001195398A patent/JP4240851B2/en not_active Expired - Lifetime
-
2002
- 2002-06-25 US US10/362,819 patent/US6932269B2/en not_active Expired - Lifetime
- 2002-06-25 CN CNB028027086A patent/CN1236388C/en not_active Expired - Fee Related
- 2002-06-25 EP EP02741281A patent/EP1403815A4/en not_active Ceased
- 2002-06-25 WO PCT/JP2002/006321 patent/WO2003003292A1/en active Application Filing
-
2004
- 2004-07-02 HK HK04104760A patent/HK1063231A1/en not_active IP Right Cessation
Patent Citations (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4766293A (en) * | 1986-06-26 | 1988-08-23 | Visa International Service Association | Portable financial transaction card capable of authorizing a transaction in foreign currencies |
US5034596A (en) * | 1988-04-30 | 1991-07-23 | Kabushiki Kaisha Toshiba | IC card processing apparatus |
US5608902A (en) * | 1993-12-10 | 1997-03-04 | Kabushiki Kaisha Toshiba | File management system for memory card |
US5497411A (en) * | 1994-03-14 | 1996-03-05 | Pellerin; Joseph C. E. | Telecommunications card-access system |
US5594227A (en) * | 1995-03-28 | 1997-01-14 | Microsoft Corporation | System and method for protecting unauthorized access to data contents |
US5910652A (en) * | 1996-01-31 | 1999-06-08 | Kabushiki Kaisha Toshiba | Portable terminal apparatus for an IC card for supplying a power source voltage in a predetermined timing |
US6059191A (en) * | 1996-03-14 | 2000-05-09 | Siemens Aktiengesellschaft | Chip card |
US6273335B1 (en) * | 1998-03-05 | 2001-08-14 | Visa International Service Association | System and method for locking and unlocking an application in a smart card |
US6226199B1 (en) * | 1999-09-17 | 2001-05-01 | Fujitsu Limited | Non-volatile semiconductor memory |
Cited By (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20080271161A1 (en) * | 2004-11-23 | 2008-10-30 | Koninklijke Philips Electronics N.V. | Method and Apparatus for Transferring a Data Carrier of a First System to a Second System |
US20060114713A1 (en) * | 2004-11-30 | 2006-06-01 | Daniel Braun | MRAM with coil for creating offset field |
US7200033B2 (en) * | 2004-11-30 | 2007-04-03 | Altis Semiconductor | MRAM with coil for creating offset field |
US20080030292A1 (en) * | 2006-07-21 | 2008-02-07 | Fumio Kubono | Electromagnetic Induction Type Processing Apparatus |
US7764158B2 (en) * | 2006-07-21 | 2010-07-27 | Sony Corporation | Electromagnetic induction type processing apparatus |
US20080310602A1 (en) * | 2007-06-12 | 2008-12-18 | Microsoft Corporation | Messaging with a locked communication device |
US8218734B2 (en) * | 2007-06-12 | 2012-07-10 | Microsoft Corporation | Messaging with a locked communication device |
US11151231B2 (en) | 2007-09-27 | 2021-10-19 | Clevx, Llc | Secure access device with dual authentication |
US11190936B2 (en) * | 2007-09-27 | 2021-11-30 | Clevx, Llc | Wireless authentication system |
US11233630B2 (en) | 2007-09-27 | 2022-01-25 | Clevx, Llc | Module with embedded wireless user authentication |
US10819706B2 (en) * | 2018-07-09 | 2020-10-27 | Igt | System, apparatus and method for facilitating remote gaming communications in a venue |
Also Published As
Publication number | Publication date |
---|---|
CN1466735A (en) | 2004-01-07 |
EP1403815A1 (en) | 2004-03-31 |
JP2003016038A (en) | 2003-01-17 |
HK1063231A1 (en) | 2004-12-17 |
US6932269B2 (en) | 2005-08-23 |
JP4240851B2 (en) | 2009-03-18 |
EP1403815A4 (en) | 2009-12-02 |
WO2003003292A1 (en) | 2003-01-09 |
CN1236388C (en) | 2006-01-11 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6932269B2 (en) | Pass-code identification device and pass-code identification method | |
US7194591B2 (en) | Data communication apparatus and method for managing memory in the same | |
USRE48950E1 (en) | IC chip and information processing terminal | |
US9710635B2 (en) | Field programmable smart card terminal and token device | |
US10929565B2 (en) | Integrated circuit device, information processing apparatus, memory management method for information storage device, mobile terminal apparatus, semiconductor integrated circuit device, and communication method using mobile terminal apparatus | |
DE69923463T2 (en) | A dual-use contactless smart card, a system consisting of terminal and card, and communication methods | |
US8924293B1 (en) | Method and system of contactless interfacing for smart card banking | |
KR920007410B1 (en) | Safe file system for a portable data carrier | |
EP1256104B1 (en) | Method and device for identification and authentication | |
US20070131759A1 (en) | Smartcard and magnetic stripe emulator with biometric authentication | |
US20070152068A1 (en) | Data communicating apparatus and method for managing memory of data communicating apparatus | |
Sherman et al. | Secure network access using multiple applications of AT&T's smart card | |
US7066385B2 (en) | Information processing terminal or control method therefor | |
JP4207403B2 (en) | Information storage medium, IC chip having memory area, information processing apparatus having IC chip having memory area, and memory management method for information storage medium | |
CN102542697A (en) | POS (Point of Sale) terminal based on electronic equipment having network access function | |
KR20010009217A (en) | A mobile station combined with payment apparatus and a method providing service for the same | |
US20080006706A1 (en) | Card With Input Elements For Entering A Pin Code And Method Of Entering A Pin Code | |
JP4207404B2 (en) | Mobile terminal, control method therefor, and IC card | |
JP2003316959A (en) | Cash dispenser system, portable terminal device, and financial institution account trade method | |
US6049788A (en) | System with portable terminal and data media connectable therewith | |
JP2000507380A (en) | Safety module | |
JPH1069532A (en) | Ic card terminal and ic card system | |
KR20040084380A (en) | System and method for financial transaction using the mobile device | |
JPH1153263A (en) | Memory management system | |
JP2000259789A (en) | Ic card processor |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AS | Assignment |
Owner name: SONY CORPORATION, JAPAN Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:SUEYOSHI, MASAHIRO;KUBONO, FUMIO;YAMAGATA, AKIHIKO;AND OTHERS;REEL/FRAME:014433/0965;SIGNING DATES FROM 20030808 TO 20030813 |
|
STCF | Information on status: patent grant |
Free format text: PATENTED CASE |
|
FPAY | Fee payment |
Year of fee payment: 4 |
|
FEPP | Fee payment procedure |
Free format text: PAYER NUMBER DE-ASSIGNED (ORIGINAL EVENT CODE: RMPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
FEPP | Fee payment procedure |
Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
FPAY | Fee payment |
Year of fee payment: 8 |
|
FPAY | Fee payment |
Year of fee payment: 12 |